[Syslog-ng-maintainers] Bug#729575: syslog-ng-core: bogus date for kernel messages

Gergely Nagy algernon at balabit.hu
Thu Nov 21 14:19:21 GMT 2013


Jakub Wilk <jwilk at debian.org> writes:

> * Gergely Nagy <algernon at balabit.hu>, 2013-11-21, 14:42:
>>Hm... I have not been able to reproduce it yet...
>
> I suspect the bug might be architecture-specific. I can reproduce it
> on i386, but not on amd64.

Mhm, great, then I have a suspicion where the problem lies.

>> can you change your template to include ${.linux.timestamp} too, and
>> send me a sample?
>
> With
>
>       template("$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC (${.linux.timestamp}) $MSG\n");
>
> I've got this:
>
> 1961-02-05 14:29:55 (2278410933) fb1: VESA VGA frame buffer device

Good, good, so parsing is correct, computing the date is off, though.
Thanks, this narrows things down considerably!

-- 
|8]




More information about the Syslog-ng-maintainers mailing list